Last updated: 7 October 2026
You can play without an account. Google sign-in is optional. Goatle shows no ads and runs no analytics.
Who is responsible?
Goatle is operated independently by an individual based in the Netherlands. For privacy questions and requests, contact support@goatle.io. In this notice, “we” means Goatle's operator, responsible for personal data handled through this website.
What happens when you play?
Your browser requests the daily questions and sends your submitted answers and hint requests to our server so we can check them. Submitted guesses are processed to answer your request; the game does not log or retain them on the server.
After all three rounds finish, the game submits each round's correct-answer ranks and completion reason to calculate your daily score. The server stores only the total score, game date, question revision, completion time and a random identifier for that day's saved game. It does not store those ranks or link identifiers across days. This lets the end screen compare your score with other completed games without counting a refresh again. Only aggregate score counts are public; no names, email addresses or submitted answers appear in the chart. Scores for dates earlier than the previous game date are removed on the next completed-game submission.
Your browser saves game progress locally, including guesses, answers, hint information, dice rolls and scores, so you can resume after a refresh. Do not put sensitive personal information into the answer box.
Cloudflare hosts and delivers Goatle. Requests pass through its systems, which process technical information such as your IP address, request details, browser information and traffic or security data to deliver and protect the service. See Cloudflare's privacy policy.
Share copies your result to your clipboard when you choose it. Goatle does not post it anywhere. The service you share it with handles that information under its own policy.
Cookies and local storage
These are the storage items Goatle uses:
goatle-day· local storage- Saves the daily game and its random result identifier on this device. A new game date uses a new identifier. Replaced when a later game is saved; otherwise it has no automatic expiry. You can remove it by clearing this site's browser data.
goatle-muted· local storage- Remembers your sound preference until you change it or clear this site's browser data.
__Host-goatle_player· cookie- Keeps you signed in to your optional player account. It lasts up to 30 days and is revoked on sign-out or account deletion. It is Secure, HttpOnly and SameSite=Lax.
__Host-goatle_oauth· cookie- Binds a Google sign-in attempt to your browser to prevent login forgery. It lasts up to 10 minutes and is cleared when sign-in returns. It is Secure, HttpOnly and SameSite=Lax.
Blocking storage may prevent progress or settings from being remembered. Clearing site data removes your local saves and preferences and signs you out in that browser.
Optional Google sign-in
When you choose Google, your browser visits Google's sign-in page. Goatle verifies the response and stores your Google account identifier, verified email address, a random Goatle account identifier and account creation time. It uses this information to recognise you on later sign-ins. We do not request your name, profile picture, inbox or contacts, receive your Google password, or retain Google's access or refresh tokens.
Sign-in sessions are stored as hashed tokens with their expiry times. Temporary sign-in records expire after 10 minutes and are removed afterwards.
Your game progress and scores still save on this device. Google sign-in does not upload or synchronise these saves, and the daily score chart does not link a result to your account. Accounts have no public profile or leaderboard.
Your account remains until you choose Delete account in the account panel or request deletion using our contact address. Deletion removes your player account, Google identifier and all player sessions. Signing out ends the session in that browser. These actions do not erase your local game saves or revoke Goatle access in your Google account; you can manage connected apps separately through Google.
Google processes sign-in under its Privacy Policy.
Security and contact
To prevent abuse, sign-in protection records IP addresses (hashed for player sign-in) and attempt counts over short time windows.
If you email us, we receive your email address, message and any information you include. Cloudflare forwards mail sent to this address to a Gmail mailbox, so Cloudflare and Google also process those messages. We keep correspondence for handling your request and necessary follow-up, or longer where a legal obligation or dispute requires it.
Why we process information
We rely on legitimate interests to deliver a reliable game, prevent abuse and respond to enquiries. Optional accounts use contractual necessity for the account you request and legitimate interests for security. Where required, legal obligations provide a separate basis.
Sharing, transfers and retention
Recipients are Cloudflare for hosting and security, and Google for optional sign-in and when you email us. We do not sell player data or share it with advertisers. We may disclose information if legally required or necessary to address abuse or legal claims.
Cloudflare and Google operate internationally, including outside the European Economic Area. Cloudflare describes its safeguards, including Standard Contractual Clauses, in its Data Processing Addendum; Google describes its transfer safeguards in its privacy policy.
Cloudflare's retention of hosting records depends on the service and security purpose, as described in its policy. Other retention is described above.
We use HTTPS, and session tokens are stored as hashes. No online service can guarantee complete security.
Your rights
Depending on the applicable conditions, you may request access, correction, deletion, restriction or portability of your personal data, object to processing based on legitimate interests, and withdraw consent without affecting earlier lawful processing. Email support@goatle.io. We may need proportionate identity verification and normally respond within one month.
Local game saves stay in your browser, so you can delete them through its site-data settings; we cannot retrieve them remotely. You can complain to the Dutch Autoriteit Persoonsgegevens or your local supervisory authority. Goatle makes no automated decisions with legal or similarly significant effects.
Children and changes to this notice
Playing requires no signup. Parents or guardians can contact us about a child's information. Optional Google sign-in follows Google's account eligibility rules.
We will update the date above when this notice changes and give appropriate notice of material changes. If a new purpose needs consent, we will ask before starting that processing.